CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2007-4656
https://notcve.org/view.php?id=CVE-2007-4656
04 Sep 2007 — backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766. backup-manager-upload de Backup Manager versiones anteriores a 0.6.3 proporciona el nombre de máquina, nombre del usuario y contraseña del servidor FTP, como argumentos de línea de comandos en texto pl... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-255: Credentials Management Errors CWE-310: Cryptographic Issues •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2007-2766
https://notcve.org/view.php?id=CVE-2007-2766
18 May 2007 — lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh. El archivo lib/backup-methods.sh en Backup Manager versiones anteriores a 0.7.6, proporciona la contraseña de MySQL como un argumento de línea de comandos en texto plano, que permite a usuarios locales obtener esta contraseña mediante la enumeración del proceso y sus ... • http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146 • CWE-255: Credentials Management Errors •